General
-
Target
d00ef6093ef4b87b4d9a61a321335fb3d8280315
-
Size
1.5MB
-
Sample
241110-ctb94axfkc
-
MD5
02a84844c72293cfdbedbaee28c0f49f
-
SHA1
d00ef6093ef4b87b4d9a61a321335fb3d8280315
-
SHA256
60ff4edb80addc2de4a37fa61e4c811daa8ada05fe6df70f024a3b916d2c2615
-
SHA512
a52689ecf9760561e766d64d704e051013b884c6426bac7bbb560999aeeb5bbc047f4bca9a3508f851fb05109424aec0cf753273df1c6323b9cb7cc2efe607ab
-
SSDEEP
24576:Zeacs1vXtGBWz5cbwkNixCT3Mb9rmnibyQUlp:1csZsTb3ixs+mn6ypp
Static task
static1
Behavioral task
behavioral1
Sample
d00ef6093ef4b87b4d9a61a321335fb3d8280315.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d00ef6093ef4b87b4d9a61a321335fb3d8280315.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
redline
1
62.204.41.177:9425
-
auth_value
2c239ad7c28c8eab1f9626557bb9457a
Targets
-
-
Target
d00ef6093ef4b87b4d9a61a321335fb3d8280315
-
Size
1.5MB
-
MD5
02a84844c72293cfdbedbaee28c0f49f
-
SHA1
d00ef6093ef4b87b4d9a61a321335fb3d8280315
-
SHA256
60ff4edb80addc2de4a37fa61e4c811daa8ada05fe6df70f024a3b916d2c2615
-
SHA512
a52689ecf9760561e766d64d704e051013b884c6426bac7bbb560999aeeb5bbc047f4bca9a3508f851fb05109424aec0cf753273df1c6323b9cb7cc2efe607ab
-
SSDEEP
24576:Zeacs1vXtGBWz5cbwkNixCT3Mb9rmnibyQUlp:1csZsTb3ixs+mn6ypp
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Redline family
-
Suspicious use of SetThreadContext
-